Privacy notice
Sourceplane Atelier is a four-person research atelier. There is no online shop, no client area and no sign-up here: the only personal data that reaches us comes through the contact form, and we use it solely to answer you. This page sets out, point by point, what is collected, why the law allows it, how long it is kept, and how to exercise your rights.
Who controls your data
The data described here is handled by Sourceplane Atelier, the research atelier that publishes geofrance.org. No institution stands behind us and we claim no official backing; four researchers read what arrives themselves. Under the General Data Protection Regulation (GDPR), the atelier is the party that decides the purposes and means of the processing. A question or a request about your data is settled by a message to hello@geofrance.org.
Data collected
Everything goes through a single channel, the contact form, which asks for three things and stops there:
- A name — so the reply can address you properly.
- An email address — without it, no reply can reach you.
- A message — where you set out the case: the AI answer in question, the query that produced it, the business category, the region, and the source that seems to be at play.
Nothing else is asked. No account to create, no password, no payment details entered on this site. To limit automated submissions, the timestamp of the send is kept with a salted SHA-256 hash of the sending IP address; the IP in readable form, browser fingerprints and device traits are never recorded.
What the site deliberately avoids
To be plain, here is what this site refuses to do on purpose:
- No tracking cookies. Traffic is measured by a self-hosted, cookie-free, privacy-respecting analytics, served through a first-party proxy on this domain; nothing is shared from one site to another.
- No advertising pixels, no remarketing tags, no marketing-automation trackers.
- No automated profiling and no automated decision producing a legal effect on you.
- No selling, renting or sharing of data: the atelier runs no commercial chain that would live off it.
Legal basis for the processing
When you send the form, the handling of your name, email and message rests on Article 6(1)(b) of the GDPR: steps taken at your request before any commitment. The IP hash that protects the form against abuse rests instead on legitimate interest under Article 6(1)(f). In keeping with the spirit of the CNIL, these purposes stay limited to answering your message.
Retention periods
- Messages and the email exchange that follows: kept for the duration of the useful exchange, then 24 months to preserve the record, and erased afterwards. A message left without a follow-up is deleted after 12 months.
- IP hashes: kept for 90 days, enough to recognise possible abuse patterns, then erased.
- Any billing records: if they ever exist, they are kept only as long as tax and accounting obligations require, then deleted.
Your rights
Over the data you entrust to us, the GDPR gives you rights of access, rectification, erasure, portability, restriction and objection. Write to hello@geofrance.org and one of these rights will be handled, with a reply within one month. If you believe the processing is unlawful, you may also turn to the CNIL, or to the data-protection authority of your country of residence.
Hosting
The servers running geofrance.org are located in European Union (Germany), within the European Union. In the unlikely case where an additional processor (email provider) operated from outside the Union, the transfer would rely on standard contractual clauses and on the additional safeguards that party publishes.
Changes to this policy
If the way data is handled were to change in a meaningful way, this page would be updated to say so and the "Updated" date at the top would follow. A change of real significance would also be flagged on the home page for 30 days, so that a returning visitor notices it.